Senior Vice President, Cyber Threat Simulation

At BNY, our culture speaks for itself, check out the latest BNY news at BNY Newsroom & BNY LinkedIn

 Here’s a few of our recent awards:

• America’s Most Innovative Companies, Fortune, 2025
• World’s Most Admired Companies, Fortune 2025
• “Most Just Companies”, Just Capital and CNBC, 2025

Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

BNY assesses market data to ensure a competitive compensation package for our employees. The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting. 

Base salary offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Subject to the terms and conditions of the applicable plans then in effect, eligible employees may enroll in a 401(k) plan as well as participate in Company-sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee’s eligible dependents. Eligible employees also may receive other benefits (including various paid time off benefits, such as vacation and sick time), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, the employee will be in an “at will” position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

As a Senior Vice President, Cyber Threat Simulation  you will join the enterprise Cyber Threat Simulation service at BNY, part of the Cybersecurity Platform in Engineering. In this position, you will be responsible for designing, executing, and continuously improving BNY’s global simulation program. This role is in New York City, NY.

The Cyber Threat Simulation team delivers best-in-class cyber simulation exercises to facilitate internal training and to clients as required. In addition, provide realistic phishing simulations and targeted spear‑phishing campaigns. This includes planning, executing and preparing reports for BNY’s Cyber Threat Simulation program. The service plays a critical part in strengthening the firm’s human defense layer by delivering realistic simulations and data-driven insights that reduce user susceptibility and improve cyber awareness. 

The role combines operational execution, scenario design, analytics, automation, and stakeholder engagement, and works closely across Cyber Security to include but not limited to: SOC, Threat Intelligence, Learning, and Communications teams.

Responsibilities:

• Lead and/or assist in the planning and preparation for exercises in conjunction with participating lines of business to determine requirements, manage stakeholders, tailor exercises as required, and coordinate team resourcing and timelines.
• Work closely with the CTS leadership on facilitating cyber security simulation exercises for audiences that may include senior management and executives; sets the tone, pace, and engagement model for the session.
• Lead/Participate in post-exercise analysis to translate simulation findings into actionable lessons learned/observations with line of business participants and accountable for producing and quality-reviewing debrief materials and reports. 
• Lead and/or assist in the design, build, and execution of both quarterly global phishing tests for employees, contractors, and consultants and targeted spear‑phishing simulations for high‑risk populations based on role, access, threat intelligence, and prior susceptibility.
• Execute and maintain the phishing testing consequence model, including instant education, remediation training workflows, repeat‑offender tracking, and escalation processes.
• Collaborate across Cybersecurity Operations to develop simulations informed by real‑world threat intelligence, emerging attacker techniques, and business‑relevant events.
• Support automation and tooling enhancements for simulation and exercise development, campaign execution, consequence model execution, reporting, etc. 
• Analyze results to identify risk patterns, high‑risk populations, and opportunities for targeted intervention.
• Partner with Cyber Awareness, Learning, and Communications teams to integrate phishing testing outcomes into broader awareness initiatives.
• Maintain documentation, operating procedures, and testing standards.
• Identify opportunities to improve program maturity, scalability, and effectiveness through process optimization and automation.

Requirements

• A confident, polished presenter and lead facilitator, able to pivot quickly and adapt during a simulation to maintain tempo and steer discussion toward outcomes; able to coach others to deliver the same standard.
• 10+ years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus
• A strong understanding of data analysis (ability to draw actionable conclusions) and data presentation, translating complex findings into clear narratives for senior stakeholders.
• Hands‑on experience designing or executing phishing simulations, security awareness programs, or related cyber defense activities. 
• Strong understanding of phishing, social engineering techniques, and human‑centric cyber risk. 
• Scrupulous attention to detail with ownership for quality standards across scenarios, facilitation materials, and reporting.
• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, or a related discipline, or equivalent practical experience. 
• Ability to analyze data and translate results into clear insights for technical and non‑technical audiences. 
• Strong written and verbal communication skills, with attention to detail and quality.

Preferred Qualifications

• Experience working with cyber threat simulation platforms and security awareness tooling.
• Experience supporting global programs with diverse user populations and regulatory considerations.
• Exposure to automation, dashboards, or analytics tools used in cybersecurity programs.
• Relevant security or risk certifications (e.g., CISSP, GIAC, SANS, or equivalent) are a plus but not required.

.